https://your-wordpress-site.com/wp-admin/load-scripts.php?c=1&load=editor,common,user-profile,media-widgets,media-gallery
- Open
wp-login.php
add define('CONCATENATE_SCRIPTS', false);
after the <?php
- Open
wp-admin/load-scripts
. Replace require( ABSPATH . WPINC . '/script-loader.php' );
with require( ABSPATH . 'wp-admin/admin.php' );
- Open
wp-admin/load-styles.php
. Replace require( ABSPATH . WPINC . '/script-loader.php' );
with require( ABSPATH . 'wp-admin/admin.php' );
- Open
wp-admin/includes/noop.php
, Replace the entire content with
<?php
/**
* Noop functions for load-scripts.php and load-styles.php.
*
* @package WordPress
* @subpackage Administration
* @since 4.4.0
*/
function get_file( $path ) {
if ( function_exists('realpath') ) {
$path = realpath( $path );
}
if ( ! $path || ! @is_file( $path ) ) {
return '';
}
return @file_get_contents( $path );
}
Uptime: 120 seconds
Executable:
/usr/bin/php
Command Line (often faked in exploits):
/usr/bin/php -c /home/artwatch/public_html/php.ini
Files open by the process (if any):
/usr/local/apache/logs/error_log
/usr/local/apache/logs/error_log
/public_html/wp-content/plugins/front-end-only-users/Functions/EWD_FEUP_Styling.php
Memory maps by the process (if any):
00400000-00f18000 r-xp 00000000 fc:03 21627042 /usr/bin/php
01118000-011ec000 rw-p 00b18000 fc:03 21627042 /usr/bin/php
011ec000-01211000 rw-p 00000000 00:00 0
0233b000-054dc000 rw-p 00000000 00:00 0 [heap]
3162200000-3162215000 r-xp 00000000 fc:03 179129 /lib64/libz.so.1.2.3
3162215000-3162414000 ---p 00015000 fc:03 179129 /lib64/libz.so.1.2.3
3162414000-3162415000 r--p 00014000 fc:03 179129 /lib64/libz.so.1.2.3
3162415000-3162416000 rw-p 00015000 fc:03 179129 /lib64/libz.so.1.2.3
3162600000-316261d000 r-xp 00000000 fc:03 179130 /lib64/libselinux.so.1
316261d000-316281c000 ---p 0001d000 fc:03 179130 /lib64/libselinux.so.1
316281c000-316281d000 r--p 0001c000 fc:03 179130 /lib64/libselinux.so.1
316281d000-316281e000 rw-p 0001d000 fc:03 179130 /lib64/libselinux.so.1
316281e000-316281f000 rw-p 00000000 00:00 0
3162e00000-3162e3f000 r-xp 00000000 fc:03 156492 /usr/lib64/libjpeg.so.62.0.0
3162e3f000-316303f000 ---p 0003f000 fc:03 156492 /usr/lib64/libjpeg.so.62.0.0
316303f000-3163040000 rw-p 0003f000 fc:03 156492 /usr/lib64/libjpeg.so.62.0.0
3163040000-3163050000 rw-p 00000000 00:00 0
3163e00000-3163e11000 r-xp 00000000 fc:03 159263 /usr/lib64/libXpm.so.4.11.0
3163e11000-3164010000 ---p 00011000 fc:03 159263 /usr/lib64/libXpm.so.4.11.0
3164010000-3164011000 rw-p 00010000 fc:03 159263 /usr/lib64/libXpm.so.4.11.0
3164200000-3164209000 r-xp 00000000 fc:03 156987 /usr/lib64/libltdl.so.7.2.1
3164209000-3164408000 ---p 00009000 fc:03 156987 /usr/lib64/libltdl.so.7.2.1
3164408000-3164409000 rw-p 00008000 fc:03 156987 /usr/lib64/libltdl.so.7.2.1
3165200000-3165298000 r-xp 00000000 fc:03 155319 /usr/lib64/libfreetype.so.6.3.22
3165298000-3165497000 ---p 00098000 fc:03 155319 /usr/lib64/libfreetype.so.6.3.22
3165497000-316549d000 rw-p 00097000 fc:03 155319 /usr/lib64/libfreetype.so.6.3.22
3166200000-3166202000 r-xp 00000000 fc:03 159258 /usr/lib64/libXau.so.6.0.0
3166202000-3166402000 ---p 00002000 fc:03 159258 /usr/lib64/libXau.so.6.0.0
3166402000-3166403000 rw-p 00002000 fc:03 159258 /usr/lib64/libXau.so.6.0.0
3166a00000-3166a02000 r-xp 00000000 fc:03 16207896 /lib64/libkeyutils.so.1.3
3166a02000-3166c01000 ---p 00002000 fc:03 16207896 /lib64/libkeyutils.so.1.3
3166c01000-3166c02000 r--p 00001000 fc:03 16207896 /lib64/libkeyutils.so.1.3
3166c02000-3166c03000 rw-p 00002000 fc:03 16207896 /lib64/libkeyutils.so.1.3
3169600000-3169625000 r-xp 00000000 fc:03 157862 /usr/lib64/libpng12.so.0.49.0
3169625000-3169825000 ---p 00025000 fc:03 157862 /usr/lib64/libpng12.so.0.49.0
3169825000-3169826000 rw-p 00025000 fc:03 157862 /usr/lib64/libpng12.so.0.49.0
316da00000-316da32000 r-xp 00000000 fc:03 179147 /lib64/libidn.so.11.6.1
316da32000-316dc31000 ---p 00032000 fc:03 179147 /lib64/libidn.so.11.6.1
316dc31000-316dc32000 rw-p 00031000 fc:03 179147 /lib64/libidn.so.11.6.1
7fd337efa000-7fd337f1b000 rw-p 00000000 00:00 0
7fd339d74000-7fd339ea9000 r--s 00000000 fc:03 6968247 /var/db/nscd/hosts
7fd339ea9000-7fd339eb3000 r-xp 00000000 fc:03 192470 /lib64/libkrb5support.so.0.1
7fd339eb3000-7fd33a0b2000 ---p 0000a000 fc:03 192470 /lib64/libkrb5support.so.0.1
7fd33a0b2000-7fd33a0b3000 r--p 00009000 fc:03 192470 /lib64/libkrb5support.so.0.1
7fd33a0b3000-7fd33a0b4000 rw-p 0000a000 fc:03 192470 /lib64/libkrb5support.so.0.1
7fd33a0b4000-7fd33a0d8000 r-xp 00000000 fc:03 155015 /usr/lib64/libxcb.so.1.1.0
7fd33a0d8000-7fd33a2d8000 ---p 00024000 fc:03 155015 /usr/lib64/libxcb.so.1.1.0
7fd33a2d8000-7fd33a2d9000 rw-p 00024000 fc:03 155015 /usr/lib64/libxcb.so.1.1.0
7fd33a2d9000-7fd33a2f1000 r-xp 00000000 fc:03 5175655 /lib64/libaudit.so.1.0.0
7fd33a2f1000-7fd33a4f0000 ---p 00018000 fc:03 5175655 /lib64/libaudit.so.1.0.0
7fd33a4f0000-7fd33a4f2000 r--p 00017000 fc:03 5175655 /lib64/libaudit.so.1.0.0
7fd33a4f2000-7fd33a4fd000 rw-p 00019000 fc:03 5175655 /lib64/libaudit.so.1.0.0
7fd33a4fd000-7fd33a514000 r-xp 00000000 fc:03 1041245 /lib64/libpthread-2.12.so
7fd33a514000-7fd33a714000 ---p 00017000 fc:03 1041245 /lib64/libpthread-2.12.so
7fd33a714000-7fd33a715000 r--p 00017000 fc:03 1041245 /lib64/libpthread-2.12.so
7fd33a715000-7fd33a716000 rw-p 00018000 fc:03 1041245 /lib64/libpthread-2.12.so
7fd33a716000-7fd33a71a000 rw-p 00000000 00:00 0
7fd33a71a000-7fd33a71c000 r-xp 00000000 fc:03 178651 /lib64/libfreebl3.so
7fd33a71c000-7fd33a91b000 ---p 00002000 fc:03 178651 /lib64/libfreebl3.so
7fd33a91b000-7fd33a91c000 r--p 00001000 fc:03 178651 /lib64/libfreebl3.so
7fd33a91c000-7fd33a91d000 rw-p 00002000 fc:03 178651 /lib64/libfreebl3.so
7fd33a91d000-7fd33a933000 r-xp 00000000 fc:03 1041255 /lib64/libresolv-2.12.so
7fd33a933000-7fd33ab33000 ---p 00016000 fc:03 1041255 /lib64/libresolv-2.12.so
7fd33ab33000-7fd33ab34000 r--p 00016000 fc:03 1041255 /lib64/libresolv-2.12.so
7fd33ab34000-7fd33ab35000 rw-p 00017000 fc:03 1041255 /lib64/libresolv-2.12.so
7fd33ab35000-7fd33ab37000 rw-p 00000000 00:00 0
7fd33ab37000-7fd33acc1000 r-xp 00000000 fc:03 1041202 /lib64/libc-2.12.so
7fd33acc1000-7fd33aec1000 ---p 0018a000 fc:03 1041202 /lib64/libc-2.12.so
7fd33aec1000-7fd33aec5000 r--p 0018a000 fc:03 1041202 /lib64/libc-2.12.so
7fd33aec5000-7fd33aec7000 rw-p 0018e000 fc:03 1041202 /lib64/libc-2.12.so
7fd33aec7000-7fd33aecb000 rw-p 00000000 00:00 0
7fd33aecb000-7fd33aee1000 r-xp 00000000 fc:03 1041182 /lib64/libgcc_s-4.4.7-20120601.so.1
7fd33aee1000-7fd33b0e0000 ---p 00016000 fc:03 1041182 /lib64/libgcc_s-4.4.7-20120601.so.1
7fd33b0e0000-7fd33b0e1000 rw-p 00015000 fc:03 1041182 /lib64/libgcc_s-4.4.7-20120601.so.1
7fd33b0e1000-7fd33b231000 r-xp 00000000 fc:03 18385 /opt/xml2/lib/libxml2.so.2.9.2
7fd33b231000-7fd33b430000 ---p 00150000 fc:03 18385 /opt/xml2/lib/libxml2.so.2.9.2
7fd33b430000-7fd33b43a000 rw-p 0014f000 fc:03 18385 /opt/xml2/lib/libxml2.so.2.9.2
7fd33b43a000-7fd33b43b000 rw-p 00000000 00:00 0
7fd33b43b000-7fd33b477000 r-xp 00000000 fc:03 1291634 /opt/xslt/lib/libxslt.so.1.1.28
7fd33b477000-7fd33b676000 ---p 0003c000 fc:03 1291634 /opt/xslt/lib/libxslt.so.1.1.28
7fd33b676000-7fd33b678000 rw-p 0003b000 fc:03 1291634 /opt/xslt/lib/libxslt.so.1.1.28
7fd33b678000-7fd33b683000 r-xp 00000000 fc:03 156707 /usr/lib64/libicuio.so.42.1
7fd33b683000-7fd33b882000 ---p 0000b000 fc:03 156707 /usr/lib64/libicuio.so.42.1
7fd33b882000-7fd33b884000 rw-p 0000a000 fc:03 156707 /usr/lib64/libicuio.so.42.1
7fd33b884000-7fd33c7cf000 r-xp 00000000 fc:03 157187 /usr/lib64/libicudata.so.42.1
7fd33c7cf000-7fd33c9ce000 ---p 00f4b000 fc:03 157187 /usr/lib64/libicudata.so.42.1
7fd33c9ce000-7fd33c9cf000 rw-p 00f4a000 fc:03 157187 /usr/lib64/libicudata.so.42.1
7fd33c9cf000-7fd33cb0e000 r-xp 00000000 fc:03 156715 /usr/lib64/libicuuc.so.42.1
7fd33cb0e000-7fd33cd0e000 ---p 0013f000 fc:03 156715 /usr/lib64/libicuuc.so.42.1
7fd33cd0e000-7fd33cd1f000 rw-p 0013f000 fc:03 156715 /usr/lib64/libicuuc.so.42.1
7fd33cd1f000-7fd33cd21000 rw-p 00000000 00:00 0
7fd33cd21000-7fd33cea9000 r-xp 00000000 fc:03 156705 /usr/lib64/libicui18n.so.42.1
7fd33cea9000-7fd33d0a9000 ---p 00188000 fc:03 156705 /usr/lib64/libicui18n.so.42.1
7fd33d0a9000-7fd33d0b6000 rw-p 00188000 fc:03 156705 /usr/lib64/libicui18n.so.42.1
7fd33d0b6000-7fd33d0b7000 rw-p 00000000 00:00 0
7fd33d0b7000-7fd33d114000 r-xp 00000000 fc:03 19120 /opt/curlssl/lib/libcurl.so.4.3.0
7fd33d114000-7fd33d313000 ---p 0005d000 fc:03 19120 /opt/curlssl/lib/libcurl.so.4.3.0
7fd33d313000-7fd33d316000 rw-p 0005c000 fc:03 19120 /opt/curlssl/lib/libcurl.so.4.3.0
7fd33d316000-7fd33d319000 r-xp 00000000 fc:03 187136 /lib64/libcom_err.so.2.1
7fd33d319000-7fd33d518000 ---p 00003000 fc:03 187136 /lib64/libcom_err.so.2.1
7fd33d518000-7fd33d519000 r--p 00002000 fc:03 187136 /lib64/libcom_err.so.2.1
7fd33d519000-7fd33d51a000 rw-p 00003000 fc:03 187136 /lib64/libcom_err.so.2.1
7fd33d51a000-7fd33d543000 r-xp 00000000 fc:03 192462 /lib64/libk5crypto.so.3.1
7fd33d543000-7fd33d743000 ---p 00029000 fc:03 192462 /lib64/libk5crypto.so.3.1
7fd33d743000-7fd33d744000 r--p 00029000 fc:03 192462 /lib64/libk5crypto.so.3.1
7fd33d744000-7fd33d745000 rw-p 0002a000 fc:03 192462 /lib64/libk5crypto.so.3.1
7fd33d745000-7fd33d746000 rw-p 00000000 00:00 0
7fd33d746000-7fd33d822000 r-xp 00000000 fc:03 192464 /lib64/libkrb5.so.3.3
7fd33d822000-7fd33da21000 ---p 000dc000 fc:03 192464 /lib64/libkrb5.so.3.3
7fd33da21000-7fd33da2b000 r--p 000db000 fc:03 192464 /lib64/libkrb5.so.3.3
7fd33da2b000-7fd33da2d000 rw-p 000e5000 fc:03 192464 /lib64/libkrb5.so.3.3
7fd33da2d000-7fd33da6e000 r-xp 00000000 fc:03 187200 /lib64/libgssapi_krb5.so.2.2
7fd33da6e000-7fd33dc6e000 ---p 00041000 fc:03 187200 /lib64/libgssapi_krb5.so.2.2
7fd33dc6e000-7fd33dc6f000 r--p 00041000 fc:03 187200 /lib64/libgssapi_krb5.so.2.2
7fd33dc6f000-7fd33dc71000 rw-p 00042000 fc:03 187200 /lib64/libgssapi_krb5.so.2.2
7fd33dc71000-7fd33dc87000 r-xp 00000000 fc:03 1041218 /lib64/libnsl-2.12.so
7fd33dc87000-7fd33de86000 ---p 00016000 fc:03 1041218 /lib64/libnsl-2.12.so
7fd33de86000-7fd33de87000 r--p 00015000 fc:03 1041218 /lib64/libnsl-2.12.so
7fd33de87000-7fd33de88000 rw-p 00016000 fc:03 1041218 /lib64/libnsl-2.12.so
7fd33de88000-7fd33de8a000 rw-p 00000000 00:00 0
7fd33de8a000-7fd33decd000 r-xp 00000000 fc:03 28571 /opt/pcre/lib/libpcre.so.1.2.6
7fd33decd000-7fd33e0cc000 ---p 00043000 fc:03 28571 /opt/pcre/lib/libpcre.so.1.2.6
7fd33e0cc000-7fd33e0cd000 rw-p 00042000 fc:03 28571 /opt/pcre/lib/libpcre.so.1.2.6
7fd33e0cd000-7fd33e204000 r-xp 00000000 fc:03 156098 /usr/lib64/libX11.so.6.3.0
7fd33e204000-7fd33e404000 ---p 00137000 fc:03 156098 /usr/lib64/libX11.so.6.3.0
7fd33e404000-7fd33e40a000 rw-p 00137000 fc:03 156098 /usr/lib64/libX11.so.6.3.0
7fd33e40a000-7fd33e416000 r-xp 00000000 fc:03 178980 /lib64/libpam.so.0.82.2
7fd33e416000-7fd33e616000 ---p 0000c000 fc:03 178980 /lib64/libpam.so.0.82.2
7fd33e616000-7fd33e617000 r--p 0000c000 fc:03 178980 /lib64/libpam.so.0.82.2
7fd33e617000-7fd33e618000 rw-p 0000d000 fc:03 178980 /lib64/libpam.so.0.82.2
7fd33e618000-7fd33e700000 r-xp 00000000 fc:03 155180 /usr/lib64/libstdc++.so.6.0.13
7fd33e700000-7fd33e900000 ---p 000e8000 fc:03 155180 /usr/lib64/libstdc++.so.6.0.13
7fd33e900000-7fd33e907000 r--p 000e8000 fc:03 155180 /usr/lib64/libstdc++.so.6.0.13
7fd33e907000-7fd33e909000 rw-p 000ef000 fc:03 155180 /usr/lib64/libstdc++.so.6.0.13
7fd33e909000-7fd33e91e000 rw-p 00000000 00:00 0
7fd33e91e000-7fd33e948000 r-xp 00000000 fc:03 2135945 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7fd33e948000-7fd33eb47000 ---p 0002a000 fc:03 2135945 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7fd33eb47000-7fd33eb4b000 rw-p 00029000 fc:03 2135945 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7fd33eb4b000-7fd33eb50000 rw-p 00000000 00:00 0
7fd33eb50000-7fd33eb57000 r-xp 00000000 fc:03 1041308 /lib64/librt-2.12.so
7fd33eb57000-7fd33ed56000 ---p 00007000 fc:03 1041308 /lib64/librt-2.12.so
7fd33ed56000-7fd33ed57000 r--p 00006000 fc:03 1041308 /lib64/librt-2.12.so
7fd33ed57000-7fd33ed58000 rw-p 00007000 fc:03 1041308 /lib64/librt-2.12.so
7fd33ed58000-7fd33ed5a000 r-xp 00000000 fc:03 1041213 /lib64/libdl-2.12.so
7fd33ed5a000-7fd33ef5a000 ---p 00002000 fc:03 1041213 /lib64/libdl-2.12.so
7fd33ef5a000-7fd33ef5b000 r--p 00002000 fc:03 1041213 /lib64/libdl-2.12.so
7fd33ef5b000-7fd33ef5c000 rw-p 00003000 fc:03 1041213 /lib64/libdl-2.12.so
7fd33ef5c000-7fd33efdf000 r-xp 00000000 fc:03 1041216 /lib64/libm-2.12.so
7fd33efdf000-7fd33f1de000 ---p 00083000 fc:03 1041216 /lib64/libm-2.12.so
7fd33f1de000-7fd33f1df000 r--p 00082000 fc:03 1041216 /lib64/libm-2.12.so
7fd33f1df000-7fd33f1e0000 rw-p 00083000 fc:03 1041216 /lib64/libm-2.12.so
7fd33f1e0000-7fd33f1f2000 r-xp 00000000 fc:03 1291649 /opt/xslt/lib/libexslt.so.0.8.17
7fd33f1f2000-7fd33f3f2000 ---p 00012000 fc:03 1291649 /opt/xslt/lib/libexslt.so.0.8.17
7fd33f3f2000-7fd33f3f3000 rw-p 00012000 fc:03 1291649 /opt/xslt/lib/libexslt.so.0.8.17
7fd33f3f3000-7fd33f455000 r-xp 00000000 fc:03 157473 /usr/lib64/libssl.so.1.0.1e
7fd33f455000-7fd33f655000 ---p 00062000 fc:03 157473 /usr/lib64/libssl.so.1.0.1e
7fd33f655000-7fd33f659000 r--p 00062000 fc:03 157473 /usr/lib64/libssl.so.1.0.1e
7fd33f659000-7fd33f65f000 rw-p 00066000 fc:03 157473 /usr/lib64/libssl.so.1.0.1e
7fd33f65f000-7fd33f819000 r-xp 00000000 fc:03 157453 /usr/lib64/libcrypto.so.1.0.1e
7fd33f819000-7fd33fa19000 ---p 001ba000 fc:03 157453 /usr/lib64/libcrypto.so.1.0.1e
7fd33fa19000-7fd33fa34000 r--p 001ba000 fc:03 157453 /usr/lib64/libcrypto.so.1.0.1e
7fd33fa34000-7fd33fa40000 rw-p 001d5000 fc:03 157453 /usr/lib64/libcrypto.so.1.0.1e
7fd33fa40000-7fd33fa44000 rw-p 00000000 00:00 0
7fd33fa44000-7fd33fa4b000 r-xp 00000000 fc:03 1041209 /lib64/libcrypt-2.12.so
7fd33fa4b000-7fd33fc4b000 ---p 00007000 fc:03 1041209 /lib64/libcrypt-2.12.so
7fd33fc4b000-7fd33fc4c000 r--p 00007000 fc:03 1041209 /lib64/libcrypt-2.12.so
7fd33fc4c000-7fd33fc4d000 rw-p 00008000 fc:03 1041209 /lib64/libcrypt-2.12.so
7fd33fc4d000-7fd33fc7b000 rw-p 00000000 00:00 0
7fd33fc7b000-7fd33fc9b000 r-xp 00000000 fc:03 1041195 /lib64/ld-2.12.so
7fd33fce0000-7fd33fce3000 r--s 00000000 fc:03 8675139 /home/artwatch/public_html/wp-content/plugins/front-end-only-users/Functions/EWD_FEUP_Styling.php
7fd33fce3000-7fd33fe8a000 rw-p 00000000 00:00 0
7fd33fe9a000-7fd33fe9b000 rw-p 00000000 00:00 0
7fd33fe9b000-7fd33fe9c000 r--p 00020000 fc:03 1041195 /lib64/ld-2.12.so
7fd33fe9c000-7fd33fe9d000 rw-p 00021000 fc:03 1041195 /lib64/ld-2.12.so
7fd33fe9d000-7fd33fe9e000 rw-p 00000000 00:00 0
7ffef9f5a000-7ffef9f6f000 rw-p 00000000 00:00 0 [stack]
7ffef9f93000-7ffef9f94000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]